Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
File: 34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa (raw, json)
Hash identifier: RtONGE433+lsayc62HFj4+RgoaqB+V8I7NIo/o7oMiQ=
Subject key identifier: A3:92:7E:28:72:3C:67:13:39:49:7D:54:26:35:62:F1:7C:5A:D0:15
Certificate issuer: /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial: 159E936A626DD73E638EF98797E794F6971A5F66
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access: rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
Signing time: Sat 08 Mar 2025 16:03:28 +0000
ROA not before: Sat 08 Mar 2025 15:58:28 +0000
ROA not after: Sat 07 Mar 2026 16:03:28 +0000
asID: 268054
IP address blocks: 45.167.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:9e:93:6a:62:6d:d7:3e:63:8e:f9:87:97:e7:94:f6:97:1a:5f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Validity
Not Before: Mar 8 15:58:28 2025 GMT
Not After : Mar 7 16:03:28 2026 GMT
Subject: CN=A3927E28723C671339497D54263562F17C5AD015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:66:d2:23:56:52:5a:16:2e:90:10:be:1a:
13:df:22:8c:bd:c9:1b:ad:e2:8d:20:f7:41:50:5a:
d3:f4:74:de:fb:36:14:7a:2a:e6:d2:89:29:7c:61:
73:9a:1c:2c:44:f1:f2:8c:e7:f4:55:12:51:62:9e:
20:84:11:db:eb:60:b3:32:60:6a:24:cf:c1:f7:6c:
45:3f:ba:6d:a1:6f:c3:bc:33:5f:88:e7:7e:c7:f5:
46:16:39:76:48:1c:52:8a:ea:8a:7e:1e:8c:46:c0:
64:32:a4:ed:19:d5:47:f6:cb:d9:5c:5a:18:e9:70:
0e:98:80:dc:27:50:c8:bf:b0:b5:ef:4d:6c:0e:3f:
b7:75:aa:6f:58:b3:dc:2a:15:ce:df:39:9c:99:8b:
16:de:62:54:81:e7:d2:6e:2a:0c:dc:bd:7c:5c:48:
97:eb:10:fb:99:02:26:88:61:0a:d2:2f:ee:d7:09:
58:0b:c6:fe:45:e7:3d:50:ae:c7:12:9b:09:02:09:
05:28:c5:51:14:b6:99:ae:04:66:c7:fe:d6:3b:38:
0f:b2:0c:20:ad:8a:60:95:1b:cb:b8:0a:1e:26:ef:
b8:00:6f:1a:4a:48:3a:74:5b:ca:75:a9:16:cc:1f:
15:ab:b4:f6:75:70:87:23:d6:14:8e:93:7d:c5:5f:
3f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:92:7E:28:72:3C:67:13:39:49:7D:54:26:35:62:F1:7C:5A:D0:15
X509v3 Authority Key Identifier:
keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.167.104.0/22
Signature Algorithm: sha256WithRSAEncryption
40:e1:ba:02:96:71:18:9d:3f:d7:3f:d7:7c:4e:fb:c3:20:7b:
f6:32:a3:e8:ab:d6:61:c3:27:79:22:15:c2:1b:2a:16:79:4b:
c1:14:de:b2:86:26:03:02:1d:72:78:3c:17:b8:b7:c5:6d:c6:
a1:7b:fa:0b:45:07:21:9a:a9:7e:06:80:fb:ae:a5:29:03:6c:
c4:61:0b:4e:57:73:7b:55:79:55:93:cd:21:82:24:a9:16:67:
ab:fb:75:6e:5e:5f:e6:54:21:5f:01:77:04:a8:f4:95:1c:85:
d8:1e:00:21:45:54:27:29:ec:fd:53:ee:4c:b8:40:87:81:52:
2d:a0:b3:35:7f:01:be:ac:94:fd:fa:e5:be:f0:92:e1:b6:bb:
8a:63:35:52:ec:17:ab:44:55:c0:3e:b0:02:d8:99:b3:71:62:
e1:2c:55:c0:be:02:82:53:c2:81:9f:11:73:6b:81:ae:8d:85:
e9:e4:fe:d9:06:14:9b:6f:5a:cb:34:ea:fc:28:9e:de:e4:96:
72:a7:57:0e:0f:89:d1:94:0c:4c:64:95:6c:82:b9:16:97:16:
d4:33:eb:51:b8:fc:17:0a:72:b6:d6:c8:a0:c4:7a:00:64:e6:
5c:36:73:d2:d4:a0:ef:6c:a4:a5:dd:d5:6a:2d:36:aa:ce:79:
31:80:c6:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 21:01:21 2025 by rpki-client